Closed Sherry112 closed 2 years ago
The sha1sum announced by hawkBit for the bundle does not match the calculated sha1sum of the downloaded bundle. Thus either the sha1sum listed in the details of the artifacts is wrong or something changed the artifact during download.
DId that happen once or is this reproducible?
Is the downloaded bundle still a valid bundle and accepted by RAUC?
So rauc doesn't show up any logs, as the process ends on Rauc-hawkbit-updater. Yes, the issue is reproduceable and it is happening when I try to rollback the OS version 1.3.5 -> 1.3.4 (occurs everytime). If I try to move 2 versions up, the same error shows up.
However on just updating 1 version up, the checksum is valid and the error doesn't show up. Does it have to do with the order of OS distributions on hawkbit?
Let's find out if rauc-hawkbit-updater or hawkBit cause this:
This script does basically the same thing as rauc-hawkbit-updater. It downloads the artifact that is being deployed and checks its sha1sum. The sha1sum hawkBit calculated is also shown. So please deploy the problematic file, adjust HAWKBIT
, TARGET_NAME
, TARGET_TOKEN
to your setup and run it (curl
, jq
, sha1sum
required):
#!/bin/bash
set -xe -o pipefail
HAWKBIT="http://localhost:8080"
TARGET_NAME=test
TARGET_TOKEN=ieHai3du7gee7aPhojeth4ong
AUTH_HEADER="Authorization: TargetToken $TARGET_TOKEN"
BASE="$(curl --header "$AUTH_HEADER" "${HAWKBIT}/DEFAULT/controller/v1/$TARGET_NAME")"
DEPLOYMENT_BASE_URL="$(echo "$BASE" | jq -r ._links.deploymentBase.href)"
DEPLOYMENT_BASE="$(curl --header "$AUTH_HEADER" "$DEPLOYMENT_BASE_URL")"
ARTIFACT_URL="$(echo "$DEPLOYMENT_BASE" | jq -r .deployment.chunks[0].artifacts[0]._links.'"download-http"'.href)"
HAWKBIT_SHA1="$(echo "$DEPLOYMENT_BASE" | jq -r .deployment.chunks[0].artifacts[0].hashes.sha1)"
set +x
echo -n "calculated sha1: "
curl --silent --header "$AUTH_HEADER" "$ARTIFACT_URL" | sha1sum
echo "hawkbit sha1: $HAWKBIT_SHA1"
@Sherry112 Did you find the culprit for the checksum mismatch?
@Sherry112 I'd still like to understand what's causing the checksum mismatch. Any news regarding this?
I will close this due to inactivity. Feel free to reopen if the error persists or if it can be reproduced by someone else.
Hello!, I want to do an OS update with Yocto. I am using rauc-hawkbit-updater and rauc for the delivering the OS to the device and for installing the OS respectively. Hawkbit is in sync with AWS S3 bucket which has the OS distribution.
Rauc-Hawkbit-Updater downloads the OS file from hawkbit, however it is throwing this error Software: DeviceOS VR1.3.4. Invalid checksum: da39a3ee5e6b4b0d3255bfef95601890afd80709 expected 762186110ac2b74675eb7fdb1dfe1801191e364f
The logs are:
Would really appreciate some insight of what I could be doing wrong on this.